BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//CERN//INDICO//EN
BEGIN:VEVENT
SUMMARY:Quantifying the Quality of DNSSEC Validation in the Wild
DTSTART;VALUE=DATE-TIME:20170929T172500Z
DTEND;VALUE=DATE-TIME:20170929T175500Z
DTSTAMP;VALUE=DATE-TIME:20190525T152723Z
UID:indico-contribution-485@indico.dns-oarc.net
DESCRIPTION:Speakers: Moritz Müller (SIDN)\nThe Root Canary Project has t
he goal to monitor and measure the rollover\nof the DNSSEC root KSK. In th
is project we use over 9000 RIPE Atlas probes and\nten-thousands of vantag
e point of the Luminati VPN network to continuously\nmonitor recursive res
olvers during the 9 months period of the rollover.\n\nFrom each vantage po
int we query for testing domains that have bogus and valid\nsignatures of
the 12 DNSSEC algorithms that are standardized by the IETF.\nThereby we ca
n measure how recursive resolvers behave\, for example\, when the\nnew KSK
of the root becomes active.\n\nAdditionally\, we gain operational insight
s into the behavior of recursive\nresolvers in the wild that go beyond the
root KSK rollover. For example\, we\nnow know that the majority of the ob
served validating resolvers are stable and that\nsome resolver implementat
ions have incorrect behavior when they encounter\ncertain DNSSEC algorithm
s.\n\nIn this presentation we want dig deeper in the support of DNSSEC alg
orithms\nand want to show how well recursive resolvers in the wild support
the\ndifferent signing algorithms\, try to explain why some fail\, and co
mpare these\nresults with the actual deployment of DNSSEC in major gTLDs a
nd ccTLDs. Until\nthe 27th DNS-OARC workshop\, we will have over 3 months
of continuous\nmeasurements at our disposal.\n\nWe want to invite the comm
unity to provide feedback to our measurements and\nhelp us to improve our
ground truth data set. Therefore we want to introduce a\nsmall tool with w
hich operators can contribute to the Root Canary Project and\nto studies l
ike the one presented.\n\nhttps://indico.dns-oarc.net/event/27/contributio
ns/485/
LOCATION:Fairmont San Jose Regency 2 Ballroom
URL:https://indico.dns-oarc.net/event/27/contributions/485/
END:VEVENT
END:VCALENDAR